https://solvere.app/ctfs/ Recent content in CTFs on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Sat, 20 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/ctfs/ https://solvere.app/ctfs/thm/thestickershop/ Sat, 20 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/thestickershop/ Today we are solving another easy-rated TryHackMe machine called TheStickerShop. https://solvere.app/ctfs/thm/oh-my-webserver/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/oh-my-webserver/ Today we are solving another Linux-based TryHackMe machine called Oh My WebServer. This machine focuses on exploiting vulnerable web services, container breakout-style enumeration, https://solvere.app/ctfs/thm/investigation-with-splunk/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thmforensicspowershellpersistencephp https://solvere.app/ctfs/thm/investigation-with-splunk/ Today we are investigating another TryHackMe Defensive Security challenge where we are provided with Windows event logs that have already been ingested into Splunk. https://solvere.app/ctfs/thm/carnage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/carnage/ Today we are solving another Defensive Security challenge from TryHackMe called Carnage. In this challenge we are provided with a packet capture (PCAP) file from a real-world malwa https://solvere.app/ctfs/thm/breakoutthecage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/breakoutthecage/ Today we are solving another TryHackMe machine called Break Out The Cage, a Linux-based challenge inspired by Nicolas Cage. The machine contains multiple stages including anonymous https://solvere.app/ctfs/thm/super-spammr/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/super-spammr/ The infamous cosmic hacker Super-spam has returned. Originating from the planet Alpha Solaris IV, Super-spam's mission is to eliminate Linux systems across the galaxy and replace t https://solvere.app/ctfs/thm/bypass-disable-functions/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/bypass-disable-functions/ This challenge focuses on bypassing PHP security restrictions, specifically the disablefunctions directive commonly configured in hardened PHP environments. https://solvere.app/ctfs/thm/tech-supp0rt/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/tech-supp0rt/ Today we are solving another TryHackMe machine named TechSupport. https://solvere.app/ctfs/thm/revil/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/revil/ One of the employees at Lockman Group reported that all of his files had suddenly been renamed with an unfamiliar extension. After a quick inspection, the IT department suspected r https://solvere.app/ctfs/thm/newhireoldartifacts/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/newhireoldartifacts/ We are working as a SOC Analyst for an MSSP called TryNotHackMe. https://solvere.app/ctfs/thm/jump/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/jump/ We are presented with a Linux machine that heavily relies on automation pipelines. https://solvere.app/ctfs/thm/develpy/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/develpy/ Today we are solving another TryHackMe machine named DevelPy. https://solvere.app/ctfs/thm/corridor/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/corridor/ Today we solved a very easy TryHackMe challenge focused on IDOR (Insecure Direct Object Reference). https://solvere.app/ctfs/thm/conti/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/conti/ Today we are investigating a ransomware incident involving Conti Ransomware, one of the most notorious Ransomware-as-a-Service (RaaS) operations. https://solvere.app/ctfs/thm/friday-overtime/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/friday-overtime/ It is a Friday evening at PandaProbe Intelligence when SwiftSpend Finance submits an urgent threat intelligence request. https://solvere.app/ctfs/thm/expose/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/expose/ The FTP server contained no useful files. https://solvere.app/ctfs/thm/ironshade/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ironshade/ Based on threat intelligence reports, an APT group known as IronShade has been actively targeting Linux servers across the region. https://solvere.app/ctfs/thm/blueprint/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/blueprint/ As usual, we begin with a full port scan to identify exposed services. https://solvere.app/ctfs/thm/operation-coldstart/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/operation-coldstart/ Operation ColdStart is an easy Linux-based machine where our objective is to compromise the target, gain user access, and ultimately escalate privileges to root. https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Years after leaving the hacking scene, a retired hacker has unintentionally left traces of his identity scattered across the public internet. https://solvere.app/ctfs/thm/itsybitsy/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/itsybitsy/ During routine SOC monitoring, Analyst John observed an IDS alert indicating potential Command and Control (C2) communication originating from a user named Browne in the HR departm https://solvere.app/ctfs/thm/ide/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ide/ Additional HTTP service on a high port. https://solvere.app/ctfs/thm/operation-promotion/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thmwebcommand-injectionprivilege-escalationrcereverse-shellsqliapacheenum4linux https://solvere.app/ctfs/thm/operation-promotion/ You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal. https://solvere.app/ctfs/thm/light/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/light/ The room provides the following information:. https://solvere.app/ctfs/thm/whiterose/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/whiterose/ Only SSH and HTTP are exposed. https://solvere.app/ctfs/thm/monday-monitor/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/monday-monitor/ Swiftspend Finance, a fintech company, has recently deployed Wazuh and Sysmon to strengthen endpoint monitoring and improve threat detection capabilities. https://solvere.app/ctfs/thm/glitch/ Sun, 07 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/glitch/ At this point, web enumeration becomes the primary attack path. https://solvere.app/ctfs/thm/dreaming/ Sat, 06 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/dreaming/ Dreaming is a Linux-based machine that focuses on web enumeration, CMS assessment, credential discovery, database abuse, and privilege escalation through insecure permissions and s https://solvere.app/ctfs/htb/variatype/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/variatype/ The portal subdomain hosts a PHP Validation Dashboard. A .git directory was exposed at the root, allowing full source code recovery including deleted content from commit history. https://solvere.app/ctfs/htb/solidstate/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/solidstate/ print("[+]Done! Payload will be executed once somebody logs in."). https://solvere.app/ctfs/htb/sea/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/sea/ The exploits points the payload to the author's one on the file exploit.py, on line:. https://solvere.app/ctfs/htb/poison/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/poison/ On port 8000 the webserver running is serving the user.txt flag, maybe is another user who brought up the server to hack it???? https://solvere.app/ctfs/htb/nibbles/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/nibbles/ There is a login page on admin.php. https://solvere.app/ctfs/htb/interpreter/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/interpreter/ The target appears to have executed the payload. https://solvere.app/ctfs/htb/frolic/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/frolic/ Why this worked: The developer left credentials hardcoded in client-side JavaScript, validated entirely in the browser. No server-side auth — the JS just checks if input matches an https://solvere.app/ctfs/htb/friendzone/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/friendzone/ Development share — write access confirmed:. https://solvere.app/ctfs/htb/forest/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/forest/ RPC null session — user enumeration:. https://solvere.app/ctfs/htb/fluffy/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/fluffy/ crackmapexec smb 10.10.11.69 -u 'j.fleischman' -p 'J0elTHEM4n1990!' --shares. https://solvere.app/ctfs/htb/facts/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/facts/ Facts - an easy HackTheBox walkthrough with full steps and screenshots. https://solvere.app/ctfs/htb/eighteen/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/eighteen/ nxc mssql DC01.eighteen.htb -u kevin -p 'iNa2we6haRj2gaw!' --local-auth --rid-brute. https://solvere.app/ctfs/htb/devel/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/devel/ Step 3 — Start listener and trigger:. https://solvere.app/ctfs/htb/delivery/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/delivery/ Step 3 — Retrieve verification link from ticket:. https://solvere.app/ctfs/htb/cap/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/cap/ FTP transmits credentials in cleartext, exposing valid system credentials. https://solvere.app/ctfs/htb/bounty/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/bounty/ First attempt — upload .aspx webshell directly (naive approach):. https://solvere.app/ctfs/htb/blocky/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/blocky/ Blocky - an easy HackTheBox walkthrough with full steps and screenshots. https://solvere.app/ctfs/htb/beep/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/beep/ Beep - an easy HackTheBox walkthrough with full steps and screenshots. https://solvere.app/ctfs/htb/bastion/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/bastion/ mRemoteNG stores saved credentials in %APPDATA%\mRemoteNG\confCons.xml. https://solvere.app/ctfs/htb/bashed/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/bashed/ Site title: "Arrexel's Development Site" — hints at phpbash tool. https://solvere.app/ctfs/htb/armageddon/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/armageddon/ Attempt 1 — Malicious snap package with install hook:. https://solvere.app/ctfs/htb/active/ Tue, 07 Apr 2026 00:00:00 +0000 MountainFlayer htb https://solvere.app/ctfs/htb/active/ crackmapexec smb 10.129.5.161 -u '' -p '' --shares.